Lucene search
+L

3263 matches found

Kitploit
Kitploit
added 2026/09/17 1:48 a.m.13 views

CVE-2026-1492

CVE-2026-1492 - Exploit de escalada de privilegios en el plugin de registro de usuarios de WordPress Descripción Este repositorio contiene un exploit de prueba de concepto para CVE-2026-1492 , una vulnerabilidad crítica que afecta al plugin de WordPress User Registration & Membership. La...

9.8CVSS8.7AI score0.27989EPSS
SaveExploits2References1
CVE
CVE
added 2026/09/16 8:32 p.m.8 views

CVE-2026-92764

OpenCVE before 3.1.0 contains an authorization flaw in its organizations API endpoint . The endpoint fails to scope results to the organization associated with the bearer token, instead returning all organizations that the token creator belongs to. An attacker holding a valid organization-scoped ...

5.3CVSS0.00298EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2026/09/16 6:17 p.m.6 views

WordPress Simple Membership plugin <= 4.8.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Simple Membership versions = 4.8.2...

5.3CVSS0.00214EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2026/09/16 6:16 a.m.8 views

CVE-2026-89328

The FluentBoards WordPress plugin before 2.0.15 does not properly verify that a user holds board-manager privileges before performing several board-management operations, checking only board membership. This allows any member of a board to carry out manager-only actions on it, including adding or...

3.8CVSS0.00209EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 6:16 a.m.10 views

CVE-2026-85349

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

4.3CVSS0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 6:00 a.m.12 views

CVE-2026-89328

The FluentBoards WordPress plugin prior to 2.0.15 contains a privilege-escalation flaw in its board-management logic. The plugin checks only board membership rather than verifying board-manager privileges before allowing several management operations. As a result, any board member can perform man...

3.8CVSS5.7AI score0.00209EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/16 6:00 a.m.9 views

EUVD-2026-80195

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

5.8AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/16 6:00 a.m.28 views

CVE-2026-85349 FluentBoards < 2.0.15 - Subscriber+ Private Board Membership Disclosure via IDOR

The FluentBoards WordPress plugin before 2.0.15 does not properly verify authorization when returning the list of boards a user belongs to, allowing any authenticated user, including a Subscriber with no board access, to disclose the private board memberships of arbitrary users by referencing the...

0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/16 6:00 a.m.11 views

CVE-2026-85349

CVE-2026-85349 affects the FluentBoards WordPress plugin prior to version 2.0.15 . The root cause is an insecure direct object reference (IDOR) : the plugin fails to properly verify authorization when returning the list of boards a user belongs to. This allows any authenticated user at the Subscr...

4.3CVSS5.8AI score0.00282EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/09/16 6:00 a.m.7 views

WordPress FluentBoards plugin < 2.0.15 - Subscriber+ Private Board Membership Disclosure vulnerability

Subscriber+ Private Board Membership Disclosure vulnerability discovered by Usama Arshad in WordPress Plugin FluentBoards versions 2.0.15...

4.3CVSS0.00282EPSS
SaveExploits0References1Affected Software1
Kitploit
Kitploit
added 2026/09/16 1:18 a.m.11 views

CVE-2025-2563

CVE-2025-2563 User Registration & Membership = 4.1.1 - 未认证权限提升 免责声明! 本文档中提供的 CVE(通用漏洞与暴露)信息仅用于教育和参考目的。所提供细节基于作者对公开资源的检索、研究及分析。内容无意促进或鼓励任何非法活动,包括黑客攻击、漏洞利用或对系统的未授权访问。 作者对信息的任何滥用不承担任何责任。建议个人和组织负责任地应用这些知识,并遵守适用法律法规。强烈建议读者仅在获得适当授权的受控环境中测试漏洞。 本文档的作者和贡献者不支持或纵容恶意活动,并鼓励负责任的披露和道德黑客实践。 描述 在“User Registratio...

8.1CVSS7.7AI score0.48498EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/15 9:15 a.m.7 views

CVE-2025-70149-SQL-Injection

CVE-2025-70149 — Proyecto de investigación de inyección SQL Descripción general Proyecto de investigación de seguridad que demuestra la explotación y mitigación de CVE-2025-70149, una vulnerabilidad crítica de inyección SQL CVSS 9.8/10 en CodeAstro Membership Management System v1.0. Detalles de C...

9.8CVSS5.9AI score0.00392EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/15 5:07 a.m.7 views

CVE-2026-46558

CVE-2026-46558 Plane 的 V2 资产子系统在缺乏正确成员关系检查的情况下,信任了用户提供的工作区 slug 和资产 UUID,这使得一个已认证用户可以读取、复制、删除和覆盖其他工作区中的资产。 简介 我在评审 Plane (开源项目管理平台)时发现了这个问题,带着一个非常具体的问题: V2 资产端点是否实际实施了工作区隔离,还是过度信任了攻击者提供的工作区 slug 和资产 ID? 在这个案例中,答案是不。 Plane 的 V2 资产子系统暴露了两个相关的授权缺陷,破坏了任何已认证用户的工作区隔离: 工作区级资产端点在执行资产操作之前,没有强制目标工作区的成员资格...

8.3CVSS5.7AI score0.0028EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/15 12:55 a.m.10 views

PrivacyRaven

Nota: Este proyecto está en pausa. PrivacyRaven es una biblioteca de pruebas de privacidad para sistemas de aprendizaje profundo. Puedes usarla para determinar la susceptibilidad de un modelo a diferentes ataques de privacidad; evaluar técnicas de aprendizaje automático que preservan la privacida...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 11:32 p.m.9 views

weakrng-sweep

barrido weak-rng clase CVE-2026-71851 Herramienta de investigación: enumera esquemas PRNG x semillas uint32, deriva carteras BIP39, comprueba pertenencia contra un conjunto de direcciones víctima investigación defensiva, estilo illbloom. Esquemas: 0-10 illbloom: MT19937/glibc/Java/LCG/xorshift,...

9CVSS5.9AI score0.00335EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.12 views

Astra Linux – Vulnerability in Samba

A flaw was discovered in Samba. The Samba smbd file server must map Windows group identities SIDs to Unix group IDs gids. The code responsible for this mapping contained a flaw that could allow it to read data beyond the end of the array, in the event that a negative cache entry was added to the...

6.8CVSS6.6AI score0.01616EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/14 11:17 a.m.11 views

CVE-2026-8821

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

7.1CVSS0.00171EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 10:42 a.m.18 views

CVE-2026-8821

Mattermost versions 11.9.0, 11.8.4, 11.7.7, and 10.11.22 (and below within their respective branches) contain a permission bypass in the Playbooks feature. During playbook run creation, the system fails to validate the channel member-management permission, allowing an authenticated channel member...

7.1CVSS5.7AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/14 10:42 a.m.35 views

CVE-2026-8821 Playbooks run owner channel membership permission bypass

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

7.1CVSS0.00171EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 7:24 p.m.10 views

CVE-2025-2563

CVE-2025-2563 El plugin User Registration & Membership de WordPress, anterior a la versión 4.1.2, no impide que los usuarios establezcan su rol de cuenta cuando el Membership Addon está habilitado, lo que provoca un problema de escalada de privilegios y permite que usuarios no autenticados obteng...

8.1CVSS8AI score0.48498EPSS
SaveExploits7References1
Rows per page
Query Builder